$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N9becbExdyhYZb8uVAiuRA5Wg7g.roa File: N9becbExdyhYZb8uVAiuRA5Wg7g.roa (raw, json) Hash identifier: 8Y6TbYJ0bk/nnkv1JwHtY0jJKeKm4rzfwSdvPdbUb5s= Subject key identifier: 37:D6:DE:71:B1:31:77:28:58:65:BF:2E:54:08:AE:44:0E:56:83:B8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3093 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N9becbExdyhYZb8uVAiuRA5Wg7g.roa Signing time: Mon 26 Aug 2024 05:29:36 +0000 ROA not before: Mon 26 Aug 2024 05:29:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12435 (0x3093) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=37D6DE71B13177285865BF2E5408AE440E5683B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:12:72:42:7a:b8:ce:43:eb:59:ff:de:93: dc:51:c3:1e:b1:52:3b:cf:5e:5b:4b:d5:c2:53:20: 53:b3:aa:f1:a0:2f:54:5e:c4:c0:51:ff:9f:7d:cc: 95:5c:39:6d:10:1d:f6:41:ec:0c:e0:fc:b9:4d:7d: 4a:f9:f1:d5:e2:a6:f4:ce:0d:66:b8:d5:d9:2b:46: 1f:d4:61:c2:66:aa:38:c9:1e:80:61:d6:3b:c9:4b: bc:e0:3d:29:54:ea:0a:d9:7b:ad:03:0f:13:b0:23: d7:e4:bb:62:51:e3:57:51:36:06:cf:6c:6f:06:a7: 29:f5:a7:10:50:36:ad:59:53:ca:0e:25:0d:04:3c: 01:0d:a8:b8:c1:b7:f0:a8:07:2c:ce:b9:65:35:42: 78:e2:43:c9:d9:cf:ff:cb:37:2a:4d:71:36:5f:fe: ae:24:27:4e:9b:5b:c6:30:da:7e:b3:5c:86:fc:ac: c0:e4:c8:c0:22:ef:35:b5:b1:3d:e7:f6:04:a6:4d: 3f:88:07:11:4e:78:bf:a1:40:84:9e:38:29:e6:0e: cd:6e:0a:4e:15:54:65:47:9b:86:90:04:4e:04:0a: 06:08:ad:2e:97:c8:68:40:9f:a4:39:77:db:9a:77: 04:b4:49:8d:62:9d:f0:55:a0:20:f1:62:4a:bf:e0: 85:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D6:DE:71:B1:31:77:28:58:65:BF:2E:54:08:AE:44:0E:56:83:B8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N9becbExdyhYZb8uVAiuRA5Wg7g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.128.0/21 Signature Algorithm: sha256WithRSAEncryption 2f:1b:3d:0d:52:35:b5:40:32:74:97:e6:be:3d:c5:17:44:2f: 70:63:16:82:f4:8c:ba:8e:4a:2a:65:4c:ba:aa:be:09:66:7b: 29:13:a3:c2:59:bb:5f:23:1f:a5:e1:63:39:19:98:38:c8:24: f9:43:60:54:46:66:14:16:3d:22:f9:f4:e9:2b:8e:43:49:9e: 83:3e:0b:bd:45:e0:60:44:fa:d1:3d:94:1e:4c:2c:b0:0a:c4: 23:d5:76:e1:76:e5:c3:dc:a8:8c:f1:42:38:5c:41:f2:04:c4: bf:6f:32:fc:ee:60:2d:36:25:c2:35:79:eb:81:e2:d0:50:4f: 84:c9:82:d9:86:4c:99:07:70:db:48:44:1e:9a:3b:f4:33:dc: 94:06:6f:0b:f9:e6:77:23:a8:7e:f7:90:5b:a1:85:1d:6d:17: 66:72:98:7a:4b:02:47:fa:c1:90:d3:69:73:34:2c:7a:e7:c1: 2e:98:6b:5b:f5:78:e7:7a:3e:bc:7b:1e:e7:09:64:f0:a3:4b: 79:6f:fe:b4:c6:84:0f:b7:7b:e1:00:66:59:c3:d7:03:7f:54: a1:74:c4:0f:ae:d6:87:a0:51:6a:8e:b8:20:6d:78:d5:6a:f8: 15:88:0a:1b:eb:1c:42:8c:f9:96:5c:10:71:21:31:cc:14:df: 55:5f:a2:ce -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM3RDZERTcxQjEzMTc3 Mjg1ODY1QkYyRTU0MDhBRTQ0MEU1NjgzQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4jxJyQnq4zkPrWf/ek9xRwx6xUjvPXltL1cJTIFOzqvGgL1Re xMBR/599zJVcOW0QHfZB7Azg/LlNfUr58dXipvTODWa41dkrRh/UYcJmqjjJHoBh 1jvJS7zgPSlU6grZe60DDxOwI9fku2JR41dRNgbPbG8Gpyn1pxBQNq1ZU8oOJQ0E PAENqLjBt/CoByzOuWU1QnjiQ8nZz//LNypNcTZf/q4kJ06bW8Yw2n6zXIb8rMDk yMAi7zW1sT3n9gSmTT+IBxFOeL+hQISeOCnmDs1uCk4VVGVHm4aQBE4ECgYIrS6X yGhAn6Q5d9uadwS0SY1infBVoCDxYkq/4IUxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUN9becbExdyhYZb8uVAiuRA5Wg7gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL045YmVjYkV4ZHloWVpiOHVW QWl1UkE1V2c3Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AYAwDQYJKoZIhvcNAQELBQADggEBAC8bPQ1SNbVAMnSX5r49xRdEL3BjFoL0jLqO SiplTLqqvglmeykTo8JZu18jH6XhYzkZmDjIJPlDYFRGZhQWPSL59OkrjkNJnoM+ C71F4GBE+tE9lB5MLLAKxCPVduF25cPcqIzxQjhcQfIExL9vMvzuYC02JcI1eeuB 4tBQT4TJgtmGTJkHcNtIRB6aO/Qz3JQGbwv55ncjqH73kFuhhR1tF2ZymHpLAkf6 wZDTaXM0LHrnwS6Ya1v1eOd6Prx7HucJZPCjS3lv/rTGhA+3e+EAZlnD1wN/VKF0 xA+u1oegUWqOuCBteNVq+BWIChvrHEKM+ZZcEHEhMcwU31Vfos4= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org